Apache Traffic Server resource management error vulnerability

A resource management error vulnerability exists in Apache Traffic Server versions 8.0.0 through 8.1.11, 9.0.0 through 9.2.15, 10.0.0 through 10.1.4, and 10.2.0. This vulnerability arises from exhausting the worker pool of HTTP/1.1 sources by truncating the HTTP/2 Content-Length value, potentiall...

ISC BIND 9 resource management error vulnerability

Versions 9.11.0 through 9.18.50, 9.20.0 through 9.20.29, 9.21.0 through 9.21.26, 9.11.3-S1 through 9.18.50-S1, and 9.20.9-S1 through 9.20.29-S1 of ISC BIND contain a resource management error vulnerability. This vulnerability arises because the BIND resolver fails to restrict additional processin...

Apache Traffic Server input validation error vulnerability

A input validation error vulnerability exists in Apache Traffic Server versions 8.0.0 through 8.1.11, 9.0.0 through 9.2.15, 10.0.0 through 10.1.4, and 10.2.0. This vulnerability arises when a client sends a POST request containing Expect: 100-continue, and the source server responds before readin...

Vyper buffer error vulnerability

Vyper versions prior to 0.2.9 contain a buffer error vulnerability. This vulnerability arises because the forwarder proxy deployed via the built-in createforwarderto function reports a fixed value of 4096 bytes for RETURNDATASIZE instead of the actual size of returned data. When the function...

Splunk SOAR processing logic error vulnerability

Versions of Splunk SOAR prior to 8.7.0 contain a logic error vulnerability stemming from a failure in protection mechanisms...

ekko-studio input validation error vulnerability

Versions 1.0.6 and earlier of ekko-studio contain an input validation error vulnerability. This vulnerability stems from improper handling of the outputpath parameter in the saveGeneratedImages function within the Media Generation API component, specifically in the file...

WSO2 API Manager input validation error vulnerability

Versions 4.1.0 through 4.1.0.153, 4.2.0 through 4.2.0.105, and 4.3.0 through 4.3.0.20 of WSO2 API Manager contain an input validation error vulnerability. This vulnerability arises because the callback URL parameter fails to validate user-supplied inputs; it may be exploited by malicious actors t...

Pillow resource management error vulnerability

Versions of Pillow from 5.1.0 up to but not including 13.0.0 contain a resource management error vulnerability. This vulnerability arises because PdfParser.linearizepagetree in src/PIL/PdfParser.py fails to track repeated indirect references. When processing malicious PDFs that reference the same...

Apache Traffic Server resource management error vulnerability

Versions 8.1.11, 9.2.5 through 9.2.15, 10.0.0 through 10.1.4, and 10.2.0 of Apache Traffic Server contain a resource management error vulnerability. This vulnerability arises when proxy.config.http.dropchunkedtrailers is enabled; the service then waits for the dropped trailing bytes, causing...

Cisco Emergency Responder: Input validation error vulnerability

Cisco Emergency Responder versions 14, 14SU1, 14SU2, 14SU3, 14SU3a, 15, 15SU1, 15SU1a, 14SU4, 15SU2, 15SU3, 14SU5, 15SU4, and 14SU6 have a vulnerability related to input validation errors. This vulnerability arises from improper input validation, which may allow attackers to exploit custom inputs...

Michelle Tilley TOML Parser for Node.js resource management error vulnerability

Versions prior to 5.0.1 of the Michelle Tilley TOML Parser for Node.js contain a resource management error vulnerability. This vulnerability arises because toml.parse passes unbounded sequences of hexadecimal, octal, binary, and decimal digits from lib/parser.js to BigInt before performing checks...

Cisco Open Source Snort3 buffer error vulnerability

Cisco Open Source Snort3 contains a buffer error vulnerability. This vulnerability stems from the lack of error checking in the Snort 3 SMTP MIME Decoder when parsing the SMTP header’s MIME field. As a result, unauthenticated remote attackers can send specially crafted SMTP packets over an...

Apache bRPC resource management error vulnerability

Versions of Apache bRPC prior to 1.18.0 contain a resource management error vulnerability. This vulnerability stems from heap reuse after heap deallocation in the RTMP protocol component. Remote attackers can send specially crafted Abort control messages without authentication, causing the bRPC...

Cisco Emergency Responder: Input validation error vulnerability

Cisco Emergency Responder has a vulnerability related to input validation errors. This vulnerability stems from improper control of resource lifecycle, which may lead to injection attacks...

Splunk Enterprise input validation error vulnerability

Versions prior to Splunk Enterprise 10.4.4 10.4.x, prior to version 10.2.8 10.2.x, prior to version 10.0.11 10.0.x, and prior to version 9.4.16 9.4.x contain an input validation error vulnerability. This vulnerability stems from improper handling of input data...

Apache Traffic Server has a vulnerability related to input validation errors.

The Apache Traffic Server versions 8.0.0 to 8.1.11, 9.0.0 to 9.2.15, 10.0.0 to 10.1.4, and 10.2.0 have a input validation error vulnerability. This vulnerability arises from the forwarding of302 responses that should be treated as resolution errors. Additionally, the Transfer-Encoding: chunked...

Cisco TelePresence Video Communication Server Expressway buffer error vulnerability

The Cisco TelePresence Video Communication Server Expressway has a buffer error vulnerability stemming from an out-of-bounds write issue...

Coraza - Web Application Firewall: Input validation error vulnerability

Coraza – Web Application Firewall versions 3.0.0 to 3.8.1 had a vulnerability related to input validation errors. This vulnerability arose when the JSON flattened nested properties into dot-separated ARGSPOST names without escaping the literal dots. This led to conflicts between different...

Electron buffer error vulnerability

Versions of Electron prior to 42.11.6, 43.7.3, 44.4.3, and 45.0.0-alpha.9 contain a buffer error vulnerability. This vulnerability arises from the main process failing to properly verify the webContents.beginFrameSubscription frame data received from the GPU process. An attacker who gains code...

Pillow resource management error vulnerability

Versions 9.1.0 through 13.0.0 of Pillow contain a resource management error vulnerability. This arises because BmpRleDecoder.decode in src/PIL/BmpImagePlugin.py fails to set upper limits on each branch. When operating in RLE BMP delta conversion and absolute modes, data can be appended beyond the...